Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZLTQN_zcEKAJBP0tkfh3Zk_YKt0.roa
File: ZLTQN_zcEKAJBP0tkfh3Zk_YKt0.roa (raw, json)
Hash identifier: d9f8xFxE8nLxTPHAbzPVvH8/kvVcK68tTo6dm1K2W2s=
Subject key identifier: 64:B4:D0:37:FC:DC:10:A0:09:04:FD:2D:91:F8:77:66:4F:D8:2A:DD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EB3C6CE8C0A64A61E6CE3597BF5E56EBC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZLTQN_zcEKAJBP0tkfh3Zk_YKt0.roa
Signing time: Sat 06 Apr 2024 14:18:54 +0000
ROA not before: Sat 06 Apr 2024 14:18:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215208
IP address blocks: 45.8.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 16:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b3:c6:ce:8c:0a:64:a6:1e:6c:e3:59:7b:f5:e5:6e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 6 14:18:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64b4d037fcdc10a00904fd2d91f877664fd82add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:06:ee:ae:41:9e:ab:e5:65:50:0e:23:f9:
9d:9e:28:34:44:be:68:3f:8d:92:70:cb:05:45:47:
c9:19:07:db:6a:3d:69:36:28:8d:f6:0e:70:98:45:
7f:cf:08:e7:8c:90:93:7f:ea:71:83:b4:4d:24:08:
54:a7:8f:b3:e9:28:4e:a7:f4:d1:32:65:cb:59:8c:
76:d5:31:82:b9:2e:75:70:1a:74:6f:bd:da:39:c8:
a4:9a:a1:01:e9:de:8c:71:20:56:f7:41:f7:88:bb:
24:33:cc:46:a3:80:40:35:da:01:83:5a:aa:2f:af:
41:61:88:8a:c8:62:7c:cd:7b:a4:f1:11:4c:cb:71:
e5:7d:a6:e5:5e:02:da:be:0a:d7:b1:cb:c6:67:b7:
9f:6c:24:fc:6a:df:b4:96:d5:f2:1f:6d:bf:46:a2:
ff:11:f2:48:16:8f:9c:88:56:13:47:5b:d8:02:de:
d2:41:f6:25:0d:7d:96:9b:6d:c9:ad:09:cb:1e:41:
dc:6b:9d:78:83:24:89:eb:21:7b:69:5a:1e:03:8e:
13:78:e2:4c:1e:45:ca:d7:56:fa:a4:b4:03:0f:ae:
64:6d:84:02:67:82:6f:e7:cf:09:9c:84:79:53:b3:
5e:5c:42:f0:f4:ae:01:c2:99:6c:f1:d8:14:3e:96:
c9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B4:D0:37:FC:DC:10:A0:09:04:FD:2D:91:F8:77:66:4F:D8:2A:DD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZLTQN_zcEKAJBP0tkfh3Zk_YKt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.92.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b9:57:96:1f:3d:96:1d:3e:aa:07:8c:b6:c1:79:c2:86:3a:
a3:41:b6:09:76:0c:92:ef:63:7a:d3:1c:29:cc:ee:fd:5d:1f:
88:af:ef:ee:a0:87:3d:9a:18:39:76:57:19:2d:47:2d:44:9b:
60:2c:48:fa:f3:a2:66:2b:b6:4c:ee:73:e8:52:7e:53:ce:b3:
d3:ae:c8:b5:af:cd:e6:a2:86:4b:12:86:b2:bc:4d:2f:17:f4:
7e:9e:0e:4a:3f:46:08:be:2c:b9:53:ec:b8:dd:72:86:08:54:
83:78:63:f7:29:df:4c:cd:00:4c:83:10:9e:ca:5a:9e:81:93:
3f:2b:96:10:c6:77:88:29:2a:cc:43:31:2c:4b:33:c1:6a:ee:
4c:c7:a8:6a:e1:09:84:6d:51:59:1f:a6:73:84:49:7d:3e:14:
ae:78:01:3d:08:b0:a3:7e:08:34:f2:fd:35:6e:b0:ae:e3:fa:
2a:cd:ad:db:ee:ca:bb:9a:01:93:e0:e0:d9:95:34:8c:ec:be:
b1:96:36:fe:57:d2:43:c5:f5:8e:7f:f2:8d:d9:f5:b4:fa:2b:
58:c6:69:d8:7a:59:75:05:fa:12:b0:d1:08:0e:df:01:4d:78:
a4:db:82:c2:da:44:51:d6:d8:a2:5a:46:6c:03:b9:4d:00:18:
fc:21:88:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:13 2024 by rpki-client on console-fra.rpki-client.org